OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit Mar 20, 2026
Independent checks from skills.sh's audit partners.
The skill automates dependency upgrades in the Sentry SDK using standard developer tools like yarn and npx. It fetches and executes the yarn-update-dependency package from the npm registry and performs various build and audit tasks. A potential for indirect command injection exists if the package name argument is not properly sanitized by the execution environment.
Detected behaviors
1 alert: gptSecurity
1 issue